Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/e7f0aaf0-1ca0-39c7-ab01-0cb521389e61.roa
File:                     e7f0aaf0-1ca0-39c7-ab01-0cb521389e61.roa (raw, json)
Hash identifier:          VvQEnAO7N4CoBQ/hKx9mXJFTHpovgn8fJo0dKeDj0NE=
Subject key identifier:   A0:D6:B3:38:C6:A0:08:9B:1B:EB:1E:64:BB:ED:F5:52:C6:43:5F:21
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584DF0AB4400B5737E1E487018B8
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/e7f0aaf0-1ca0-39c7-ab01-0cb521389e61.roa
Signing time:             Sun 24 May 2026 13:00:30 +0000
ROA not before:           Sun 24 May 2026 13:00:30 +0000
ROA not after:            Sat 22 Aug 2026 13:00:30 +0000
asID:                     15164
IP address blocks:        173.244.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f0:ab:44:00:b5:73:7e:1e:48:70:18:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: May 24 13:00:30 2026 GMT
            Not After : Aug 22 13:00:30 2026 GMT
        Subject: CN=0d53a3df-c0d6-4c18-ad30-bb8b2c3bb013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:95:23:a6:d8:17:0a:45:3f:84:9e:bc:3e:2d:
                    2f:69:3e:9a:7d:5e:e6:15:81:1d:07:f5:31:6a:28:
                    0d:c0:68:8b:15:a4:5f:c5:dc:e7:6c:b9:a4:09:94:
                    37:c7:1d:97:75:45:40:cc:6c:7c:99:d7:c0:91:da:
                    79:2e:d1:19:71:7f:71:7d:de:c6:41:c9:c0:6e:10:
                    65:a4:70:a8:e8:c2:19:9a:b5:ab:6c:c2:27:b2:df:
                    ec:aa:81:28:f9:86:6a:59:7a:49:e1:4c:c2:88:68:
                    74:98:5c:a2:a9:25:dc:f6:db:07:f3:5d:74:91:51:
                    18:bc:24:1b:a2:47:57:0f:84:39:ac:e0:2e:16:cb:
                    a6:8c:c5:c8:6f:1b:8e:e3:bd:c8:3d:7e:2b:e8:be:
                    98:54:84:e3:5f:7c:94:d2:b1:be:32:56:4c:8b:fc:
                    c2:88:f3:9f:3a:48:fc:a5:c5:7a:70:5f:26:e1:6e:
                    7b:66:bb:da:2f:9a:b8:2e:f4:bf:49:3a:31:4c:fa:
                    46:e7:0e:06:b2:ee:a5:94:35:a3:57:95:c1:c4:9e:
                    5a:d0:a0:f7:b3:e2:b5:5b:ec:a1:14:e1:ef:70:72:
                    aa:c4:0e:91:71:c2:20:9e:de:7a:4b:a3:65:cd:db:
                    a6:f0:53:12:d8:1e:f5:fe:f5:c2:59:59:24:22:9b:
                    c4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D6:B3:38:C6:A0:08:9B:1B:EB:1E:64:BB:ED:F5:52:C6:43:5F:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/e7f0aaf0-1ca0-39c7-ab01-0cb521389e61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.244.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:db:e6:eb:56:15:92:98:95:75:17:36:80:d5:17:9e:9d:81:
         0a:0d:34:10:d7:ce:46:b7:79:d3:ff:53:fb:17:69:51:2e:6b:
         90:b7:9b:ab:cb:4b:2c:a6:6c:88:d6:23:a5:40:11:ae:0f:bb:
         fb:ec:f2:d2:8a:f6:ed:92:d2:85:af:ae:b5:0f:0d:4e:9a:b3:
         08:81:b7:7a:9a:34:fb:73:01:ef:66:88:d4:05:e6:40:8a:2c:
         21:6c:e9:0e:68:af:b8:b0:e0:7e:aa:33:c7:e6:5f:e3:79:90:
         71:3e:d1:77:94:4d:7f:d1:59:c0:e3:3f:7c:a6:b2:c1:51:65:
         e8:76:36:03:0b:5f:3c:95:b5:f4:20:3a:4f:39:77:50:2c:d8:
         8d:a8:31:2d:74:ea:c7:af:4e:9b:53:7d:0a:f7:96:e7:55:b2:
         0a:4c:36:17:ed:25:e1:a4:ec:0b:5d:71:af:47:db:66:3a:5b:
         50:75:ab:68:f7:a0:f7:da:21:e3:1c:1f:87:44:87:4b:9e:f2:
         ac:b0:61:38:af:4f:31:25:12:a0:8d:5c:94:4c:9e:35:bf:98:
         f2:71:61:c8:26:6c:2a:f0:96:09:1f:f0:0a:a6:f2:34:02:36:
         cc:f3:9d:e6:4d:bc:58:1a:f9:f5:38:7b:0e:4f:1a:20:ab:a3:
         2a:f5:a5:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 01:49:00 2026 by rpki-client